Skip to content

chore(deps): Bump the production-dependencies group across 1 directory with 9 updates#664

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/production-dependencies-615d5d6aed
Closed

chore(deps): Bump the production-dependencies group across 1 directory with 9 updates#664
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/production-dependencies-615d5d6aed

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2025

Bumps the production-dependencies group with 8 updates in the / directory:

Package From To
github.com/docker/cli 27.5.0+incompatible 28.0.0+incompatible
github.com/google/cel-go 0.23.2 0.24.0
github.com/klauspost/compress 1.17.11 1.18.0
golang.org/x/crypto 0.34.0 0.35.0
golang.org/x/oauth2 0.26.0 0.27.0
golang.org/x/tools 0.29.0 0.30.0
google.golang.org/api 0.222.0 0.223.0
sigs.k8s.io/structured-merge-diff/v4 4.4.2 4.5.0

Updates github.com/docker/cli from 27.5.0+incompatible to 28.0.0+incompatible

Commits
  • f9ced58 Merge pull request #5845 from vvoland/vendor-docker
  • 33f327a vendor: github.com/docker/docker v28.0.0-dev (af898abe4466)
  • 9e60cfe Merge pull request #5843 from thaJeztah/bump_engine_28.0_rc3
  • 96eb1e9 Merge pull request #5841 from sarahsanders-docker/reference-styling-issue
  • f977b92 Fix missing link from Configure node healthcheck heading
  • f53cee5 vendor: github.com/docker/docker v28.0.0-rc.3
  • 1dcfd23 Merge pull request #5840 from thaJeztah/bump_engine_28.0_rc3
  • fe349e6 vendor: github.com/docker/docker 00ab386b5a2e (master, v28.0.0-rc.3)
  • a8f8886 Merge pull request #5838 from thaJeztah/bump_engine
  • 1369019 vendor: github.com/docker/docker v28.0.0-rc.2
  • Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.23.2 to 0.24.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.24.0

Support for subsetting CEL standard library and serialization of CEL environments to YAML.

CEL is an official Google product #1122

Features

  • Helper methods for subsetting function overloads #1120
  • Introduce cel package aliases for Activation #1123
  • Canonical environment description and stdlib subsetting #1125
  • Support for cel.Env conversion to YAML-serializable config #1128
  • Option to configure CEL via env.Config object #1129
  • Support for feature flags and validators in env.Config #1132
  • Add k8s custom policy tag handler for test #1121

Fixes

  • ContextEval support for Unknowns #1126
  • Fix godoc formatting for Lists and OptionalTypes functions #1127
  • Default enable DefaultUTCTimeZone #1130
  • Support for splitting nested branching operators within policies #1136

New Contributors

Full Changelog: google/cel-go@v0.23.2...v0.24.0

Release v0.24.0-beta

Features

  • Introduce cel package aliases for Activation #1123
  • Canonical environment description and stdlib subsetting #1125
  • Support for cel.Env conversion to YAML-serializable config #1128
  • Option to configure CEL via env.Config object #1129
  • Support for feature flags and validators in env.Config #1132

Fixes

  • ContextEval support for Unknowns #1126
  • Fix godoc formatting for Lists and OptionalTypes functions #1127
  • Default enable DefaultUTCTimeZone #1130

New Contributors

Full Changelog: google/cel-go@v0.24.0-alpha...v0.24.0-beta

Release v0.24.0-alpha

Alpha release for testing new subsetting features

... (truncated)

Commits
  • 9855c70 Support for splitting nested branching operators within policies (#1136)
  • fad0c1b Use remote caching for Cloud Build with Bazel (#1134)
  • 45c4980 Support for feature flags and validators in env.Config (#1132)
  • 4b27149 Option to configure CEL via env.Config object (#1129)
  • 4adcf4d Default enable DefaultUTCTimeZone (#1130)
  • af0bf8e Support for cel.Env conversion to YAML-serializable config (#1128)
  • fddae56 Canonical environment description and stdlib subsetting (#1125)
  • b7c14fa Fix godoc formatting (#1127)
  • 9a4b48b ContextEval support for Unknowns (#1126)
  • c053251 Introduce cel package aliases for Activation (#1123)
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.17.11 to 1.18.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.0

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

Commits

Updates golang.org/x/crypto from 0.34.0 to 0.35.0

Commits
  • 7292932 ssh: limit the size of the internal packet queue while waiting for KEX
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.26.0 to 0.27.0

Commits
  • 681b4d8 jws: split token into fixed number of parts
  • 3f78298 all: upgrade go directive to at least 1.23.0 [generated]
  • 109dabf endpoints: add links/provider for Discord
  • ac571fa oauth2: fix docs for Config.DeviceAuth
  • 314ee5b endpoints: add patreon endpoint
  • See full diff in compare view

Updates golang.org/x/tools from 0.29.0 to 0.30.0

Commits
  • 09747cd go.mod: update golang.org/x dependencies
  • dc9353b gopls/internal/analysis/modernize: appendclipped: unclip
  • a886a1c internal/analysisinternal: AddImport handles dot imports
  • 94c3c49 go/analysis/analysistest: RunWithSuggestedFix: assume valid fixes
  • 5f9967d gopls/internal/analysis/modernize: strings.Split -> SplitSeq
  • a1eb5fd go/analysis/passes/framepointer: support arm64
  • 9c087d9 internal/analysis/gofix: change "forward" back to "inline"
  • 82317ce gopls/internal/analysis/modernize: slices.Delete: import slices
  • e65ea15 go/analysis/internal/checker: implement three-way merge
  • a9bf6fd gopls/internal/analysis/modernize: remove SortStable
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.222.0 to 0.223.0

Release notes

Sourced from google.golang.org/api's releases.

v0.223.0

0.223.0 (2025-02-25)

Features

Bug Fixes

  • Copy AllowHardBoundTokens option from old auth to new auth. (#3030) (8cb69d6)
Changelog

Sourced from google.golang.org/api's changelog.

0.223.0 (2025-02-25)

Features

Bug Fixes

  • Copy AllowHardBoundTokens option from old auth to new auth. (#3030) (8cb69d6)
Commits

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20250212204824-5a70512c5d8b to 0.0.0-20250219182151-9fdb1cabc7b2

Commits

Updates sigs.k8s.io/structured-merge-diff/v4 from 4.4.2 to 4.5.0

Commits
  • 7bf59b3 Merge pull request #274 from yongruilin/bool-comparison
  • 40c8ef9 Merge pull request #275 from yongruilin/extend-extractitems
  • a88b919 feat: Adds ExtractItems option to include key fields
  • 9e64d18 Merge pull request #272 from Jefftree/drop-vendor
  • e96ad23 chore: Removes unused test schema
  • c5a1d56 chore: omit comparison to bool constant
  • b1dac80 Remove vendor directory
  • dc61957 Merge pull request #270 from jpbetz/json-iter-bump
  • bfb8f51 Run go mod vendor
  • db46cc3 Merge pull request #269 from jpbetz/fix-ignore-fields-break
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 9 updates

Bumps the production-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/cli](https://github.com/docker/cli) | `27.5.0+incompatible` | `28.0.0+incompatible` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.23.2` | `0.24.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.11` | `1.18.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.34.0` | `0.35.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.26.0` | `0.27.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.29.0` | `0.30.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.222.0` | `0.223.0` |
| [sigs.k8s.io/structured-merge-diff/v4](https://github.com/kubernetes-sigs/structured-merge-diff) | `4.4.2` | `4.5.0` |



Updates `github.com/docker/cli` from 27.5.0+incompatible to 28.0.0+incompatible
- [Commits](docker/cli@v27.5.0...v28.0.0)

Updates `github.com/google/cel-go` from 0.23.2 to 0.24.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.23.2...v0.24.0)

Updates `github.com/klauspost/compress` from 1.17.11 to 1.18.0
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.11...v1.18.0)

Updates `golang.org/x/crypto` from 0.34.0 to 0.35.0
- [Commits](golang/crypto@v0.34.0...v0.35.0)

Updates `golang.org/x/oauth2` from 0.26.0 to 0.27.0
- [Commits](golang/oauth2@v0.26.0...v0.27.0)

Updates `golang.org/x/tools` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.29.0...v0.30.0)

Updates `google.golang.org/api` from 0.222.0 to 0.223.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.222.0...v0.223.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250212204824-5a70512c5d8b to 0.0.0-20250219182151-9fdb1cabc7b2
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `sigs.k8s.io/structured-merge-diff/v4` from 4.4.2 to 4.5.0
- [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases)
- [Changelog](https://github.com/kubernetes-sigs/structured-merge-diff/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/structured-merge-diff@v4.4.2...v4.5.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: github.com/google/cel-go
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/tools
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/api
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: sigs.k8s.io/structured-merge-diff/v4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the release-note-none Denotes a PR that doesn't merit a release note. label Feb 26, 2025
@kubevirt-bot kubevirt-bot added the dco-signoff: yes Indicates the PR's author has DCO signed all their commits. label Feb 26, 2025
@openshift-ci openshift-ci bot requested a review from jcanocan February 26, 2025 01:01
@kubevirt-bot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ksimon1 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Feb 26, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign ksimon1 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Feb 26, 2025

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-tests 8d37119 link true /test e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Feb 27, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 27, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/production-dependencies-615d5d6aed branch February 27, 2025 00:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dco-signoff: yes Indicates the PR's author has DCO signed all their commits. release-note-none Denotes a PR that doesn't merit a release note. size/XXL

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant